Researchers warn that hackers could soon exploit a maximum severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce that could potentially allow them to execute arbitrary PHP code on store servers. According to e-commerce security firm Sansec, no attacks exploiting the vulnerability called BlockStrap have been observed so far, but threat actors are expected to find … Read more
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution via specially crafted PDF files. The flaw was discovered on August 23 by researchers at Defiant platform Wordfence using their AI-powered system Argus. Ghostscript is a PostScript and PDF interpreter that can render PDFs as images, … Read more
Credit: Amazon TL; DR The Amazon Kindle 2026 main unit has a mild bleeding issue. Users will see fringing shadows or lines of light running along the edges of the frame. Amazon acknowledges that some batches of the Kindle base in all colors are defective and is offering to replace the device. Update: October 9, … Read more
Weekly from SecurityWeek Cybersecurity News Summary provides a succinct overview of key developments that may not be covered entirely in isolation but are nonetheless relevant to the broader threat landscape. This curated summary highlights key stories about vulnerability disclosures, new attack vectors, policy updates, industry reports and other notable events to help readers stay well-informed … Read more
Image sharing platform Gyazo has confirmed that a data breach has occurred after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. Gyazo is a cloud-based screenshot and screen recording tool from Helpfeel that automatically uploads users’ screenshots to the cloud and provides them with a shareable link for sharing … Read more